IAM Engineer: PKI & Access Governance

Talentify; New York (NY); On-site; USD 90,000 - 120,000; Full time

Job summary

The City of New York's Office of Technology and Innovation seeks an IAM Engineer to design, administer, and improve the agency’s identity and access management environment. You will handle certificate lifecycle, PKI operations, and enterprise IAM across Entra ID and Active Directory, while supporting governance, security initiatives, and 24/7 readiness.

Responsibilities include managing AD CS, HSM operations, and CLM tooling, troubleshooting trust issues, and coordinating with infrastructure and

Qualifications

• Bachelor’s degree and four years of related experience.
• Equivalent education/experience acceptable.
• Experience with IAM governance and PKI preferred.

Responsibilities

• Administer AD CS and certificate issuance, renewal, revocation.
• Support HSM operations and key ceremonies.
• Maintain CLM tooling for certificate tracking and reporting.
• Troubleshoot certificate-related production issues and complex trust chains.
• Follow PKI standards (NIST, CIS) and update documentation.
• Perform operational and engineering tasks for identity and access changes.
• Coordinate with infra, security, and app teams to keep IAM reliable and secure.

Skills

IAM

PKI

AD CS

Active Directory

Security policies

Governance

Education

Bachelor's degree

Tools

HSM

CLM tooling

Job description

The City of New York's Office of Technology and Innovation seeks an IAM Engineer to design, administer, and improve the agency’s identity and access management environment. You will handle certificate lifecycle, PKI operations, and enterprise IAM across Entra ID and Active Directory, while supporting governance, security initiatives, and 24/7 readiness.

Responsibilities include managing AD CS, HSM operations, and CLM tooling, troubleshooting trust issues, and coordinating with infrastructure and